CVE-2023-23802

Cross-Site Request Forgery CSRF vulnerability in HasThemes HT Easy GA4 Google Analytics 4 plugin = 1.0.6 versions...

CVE-2022-47172

Cross-Site Request Forgery CSRF vulnerability in HasThemes ShopLentor plugin = 2.6.2 versions...

CVE-2022-46798

Cross-Site Request Forgery CSRF vulnerability in HasThemes ShopLentor plugin = 2.5.1 leading to plugin settings change...

CVE-2025-26917

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes WP Templata wptemplata allows Reflected XSS.This issue affects WP Templata: from n/a through = 1.0.7...

CVE-2025-26917

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes WP Templata allows Reflected XSS. This issue affects WP Templata: from n/a through 1.0.7...

CVE-2025-26917

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes WP Templata wptemplata allows Reflected XSS.This issue affects WP Templata: from n/a through = 1.0.7...

CVE-2024-29102

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes Extensions For CF7 allows Stored XSS.This issue affects Extensions For CF7: from n/a through 3.0.6...

CVE-2024-29094

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HT Easy GA4 Google Analytics 4 allows Stored XSS.This issue affects HT Easy GA4 Google Analytics 4 : from n/a through 1.1.7...

CVE-2025-24695

Server-Side Request Forgery SSRF vulnerability in HasThemes Extensions For CF7 allows Server Side Request Forgery. This issue affects Extensions For CF7: from n/a through 3.2.0...

CVE-2025-24695

Server-Side Request Forgery SSRF vulnerability in HT Plugins Extensions For CF7 extensions-for-cf7 allows Server Side Request Forgery.This issue affects Extensions For CF7: from n/a through = 3.2.0...

CVE-2025-24695

CVE-2025-24695 describes a Server-Side Request Forgery (SSRF) in HasThemes Extensions For CF7. Affected software: Extensions For CF7 (WordPress plugin) up to version 3.2.0. Root cause details are not explicitly described beyond SSRF, and exploitation status is not provided in the given documents....

PT-2025-5511 · Unknown · Hasthemes Extensions For Cf7

Name of the Vulnerable Software and Affected Versions: HasThemes Extensions For CF7 versions 3.2.0 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability, which allows an attacker to perform Server Side Request Forgery. Recommendations: For versions 3.2.0 and...

CVE-2025-22801

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes Free WooCommerce Theme 99fy Extension 99fy-core allows Stored XSS.This issue affects Free WooCommerce Theme 99fy Extension: from n/a through = 1.2.8...

CVE-2025-22801

CVE-2025-22801 is a Stored XSS vulnerability in HasThemes Free WooCommerce Theme 99fy Extension, affecting Free WooCommerce Theme 99fy Extension versions from unknown/n-a up to 1.2.8. Root cause is improper input neutralization during web page generation. Public details in Red Hat and Wordfence r...

PT-2025-4710 · Hasthemes · The Free Woocommerce Theme 99Fy Extension

Name of the Vulnerable Software and Affected Versions: HasThemes Free WooCommerce Theme 99fy Extension versions 1.2.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows stored XSS. This...

CVE-2024-51673

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HasThemes HT Politic allows DOM-Based XSS.This issue affects HT Politic: from n/a through 2.4.4...

CVE-2024-51673

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DevItems HT Politic wp-politic allows DOM-Based XSS.This issue affects HT Politic: from n/a through = 2.4.4...

CVE-2024-51673

CVE-2024-51673: WordPress HT Politic plugin suffers DOM-based XSS due to improper input neutralization during page generation in versions up to 2.4.4 (affects HT Politic: from n/a through 2.4.4). The vulnerability can enable script injection by manipulating input processed during page rendering. ...

PT-2024-34818

Name of the Vulnerable Software and Affected Versions HasThemes HT Politic versions n/a through 2.4.4 Description The issue is related to improper neutralization of input during web page generation, allowing DOM-Based XSS. This is a type of Cross-site Scripting vulnerability. Recommendations For...

CVE-2024-51682

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HasThemes HT Builder – WordPress Theme Builder for Elementor allows Stored XSS.This issue affects HT Builder – WordPress Theme Builder for Elementor: from n/a through 1.3.0...